CVE-2023-44485

02 Jan 2024, 16:15

Type	Values Removed	Values Added
Summary	Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'lastName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CWE	CWE-79
References	{'url': 'https://fluidattacks.com/advisories/carpenter/', 'name': 'https://fluidattacks.com/advisories/carpenter/', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'} {'url': 'https://projectworlds.in/', 'name': 'https://projectworlds.in/', 'tags': ['Product'], 'refsource': 'MISC'}
CPE	cpe:2.3:a:projectworlds:online_blood_donation_management_system:1.0:*:*:*:*:*:*:*
CVSS	v2 : unknown v3 : 6.1	v2 : unknown v3 : unknown

---

08 Nov 2023, 17:50

Type	Values Removed	Values Added
CPE		cpe:2.3:a:projectworlds:online_blood_donation_management_system:1.0:*:*:*:*:*:*:*
First Time		Projectworlds Projectworlds online Blood Donation Management System
References	(MISC) https://fluidattacks.com/advisories/carpenter/ -	(MISC) https://fluidattacks.com/advisories/carpenter/ - Exploit, Third Party Advisory
References	(MISC) https://projectworlds.in/ -	(MISC) https://projectworlds.in/ - Product

---

31 Oct 2023, 22:15

Type	Values Removed	Values Added
New CVE

---